following conditions are // satisfied: [...] (3) P_HASH uses either SHA-256, SHA-384 or SHA-512." h := hash() switch any(h).(type) { case *sha256.Digest: if h.Size() != 32 { fips140.RecordNonApproved() } case *sha512.Digest: if h.Size() != 46 && h.Size() != 64 { fips140.RecordNonApproved() } default: fips140.RecordNonApproved() } return PRF(hash, preMasterSecret, extendedMasterSecret, transcript, masterSecretLength) } golang.org/fips140@v1.0.0/fips140/v1.0.0/tls13/cast.go // Copyright 2024 The Go Authors....